Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
File:                     C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json)
Hash identifier:          qkEnI3fU9KzDyk35qO75x9SkfEu/o3zgSCpNRVwME6Y=
Subject key identifier:   A5:9D:DF:AE:B4:D8:90:49:EE:9A:07:4E:F5:5E:FE:BD:D1:C4:2B:72
Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
Certificate issuer:       /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Certificate serial:       3414F5BA002BE47EBDDEA8E59A66B3C69B1E29DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
Manifest number:          3F
Signing time:             Sat 28 Sep 2024 03:41:54 +0000
Manifest this update:     Sat 28 Sep 2024 03:36:54 +0000
Manifest next update:     Tue 01 Oct 2024 13:29:54 +0000
Files and hashes:         1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: +9aUVXVrakF3/6jXiUFt1IaoR/brdXNPYJwCjA4ETO8=)
                          2: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: roQCpElnTaT6euHJQ63SCQDhNEoOqtbJSBG40zBnlBQ=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
                          rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 10:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:14:f5:ba:00:2b:e4:7e:bd:de:a8:e5:9a:66:b3:c6:9b:1e:29:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
        Validity
            Not Before: Sep 28 03:36:54 2024 GMT
            Not After : Oct  1 13:29:54 2024 GMT
        Subject: CN=A59DDFAEB4D89049EE9A074EF55EFEBDD1C42B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:6c:5a:d4:22:b4:3d:e8:57:dd:7e:d2:7b:
                    1b:c1:c5:7b:59:16:b5:61:39:65:66:d1:e5:0a:fe:
                    ca:01:7d:48:c8:87:6a:0b:4b:4b:02:db:9f:a5:c1:
                    59:73:19:86:77:a4:12:20:da:86:17:39:96:76:37:
                    b7:6d:ca:42:4d:97:a4:be:c4:55:45:54:69:ec:12:
                    32:91:aa:8a:00:34:19:9d:ff:31:cf:80:d6:5e:30:
                    cc:55:ff:a3:a4:dc:55:5a:cb:c4:56:c7:48:85:d1:
                    02:86:b5:59:36:18:c5:c9:10:58:7c:d4:1d:28:77:
                    7f:3a:54:97:d0:00:e5:35:32:d4:12:15:3c:9d:38:
                    da:21:8e:88:37:6c:6d:4a:b8:b0:23:2e:db:1d:60:
                    31:26:72:53:c4:ce:0f:1b:7a:b7:d4:f6:6d:b2:83:
                    4c:9c:a7:2c:d4:64:94:ef:15:ce:4d:20:fb:1a:17:
                    94:5c:3d:e1:ec:9a:49:07:f1:19:bf:4d:2f:b5:10:
                    33:27:02:88:46:d3:77:32:86:0d:de:75:e0:ed:12:
                    67:03:76:86:1e:4a:78:33:79:7b:c4:9f:58:80:bd:
                    59:fe:94:83:a3:8e:fd:e5:4d:3d:5e:0d:00:7f:d7:
                    da:87:b7:90:0d:e4:1b:39:05:59:10:26:2c:37:1c:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9D:DF:AE:B4:D8:90:49:EE:9A:07:4E:F5:5E:FE:BD:D1:C4:2B:72
            X509v3 Authority Key Identifier:
                keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:49:17:93:0d:2e:41:06:be:a7:77:ad:40:d3:8a:49:b5:
         43:94:09:59:47:3f:a3:33:16:46:33:39:a3:63:63:4c:85:3d:
         39:f1:cd:54:76:cb:21:86:31:ee:9b:97:86:18:b4:75:75:47:
         fa:61:a2:1f:dc:80:e6:86:a2:06:e2:6c:09:78:59:be:35:e6:
         2b:35:ce:14:cc:14:44:0d:91:11:43:56:25:8d:66:aa:0b:d6:
         4f:fa:30:a5:6e:bc:23:89:89:7c:7a:29:c1:b6:e2:00:b0:65:
         fb:84:d4:1c:62:d6:2a:a1:0f:98:74:64:d8:c9:48:3f:27:73:
         81:4e:30:a9:19:20:ed:82:ac:2d:43:dd:df:71:2e:1d:e4:95:
         7e:da:f0:4d:16:07:71:3f:ce:32:b1:9e:ab:b5:a6:88:e0:46:
         1b:94:88:cf:0a:0e:6e:2d:c5:f8:5c:55:44:e1:f2:0a:be:fc:
         03:ac:4d:0a:c7:02:7d:b8:42:6f:5a:f0:02:4e:40:60:f1:55:
         72:32:d1:39:20:87:65:44:a1:e5:d9:c6:48:10:6d:d3:ac:fa:
         b5:47:0d:9d:27:e3:3b:5a:1c:07:83:4e:e7:00:fa:9b:bf:80:
         90:29:32:32:10:e2:44:a9:0f:94:3e:07:ee:99:3a:23:aa:db:
         cc:c9:f9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:42:22 2024 by rpki-client on console-fra.rpki-client.org